topic Re: PIX FTP Question in Network Security

PIX FTP Question

miguel.rodrigues — Fri, 21 Feb 2020 05:49:25 GMT

I've got Cisco Secure PIX Firewall Version 5.1(4) and I would like to make FTP's download's from my inside network.

Is there any command that I've got to put in the configuration to enable that feature ???

Thanks

Miguel

Re: PIX FTP Question

alex.goldstein — Fri, 17 Aug 2001 13:19:03 GMT

In the scenario where your FTP server resides on the inside network, and the FTP server is to be made available to outside users there are two steps to take inorder for this to be successful:

1st - A static NAT entry to this server. You may want to advertise this server on WWW and for outside users to more easily resolve, having the server name filed in DNS will be required.

2nd - you will want to establis a conduit. The conduit should have a mapping to the host address and protocol to that host address. There are plenty of examples on CCO for that.

Lastly, although in an ISP environment this is not a requirement, you could restrict user via username and password.

Hope this helps you,

Alex.

Re: PIX FTP Question

rrbleeker — Fri, 17 Aug 2001 15:00:18 GMT

If you have nat/global configured and you are using passive FTP, no special configuration is required. If you are using standard mode FTP, you need to make sure that 'fixup protocol ftp 21' is configured on the PIX. This feature is on by default.